Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
File:                     _ESm2CkBQzmKHfvvhvwdrjRBoro.mft (raw, json)
Hash identifier:          fob+tNGXKkIvMINcv6aGEwsV5P8W2X/C1QH51itjcyg=
Subject key identifier:   3B:13:58:3D:36:69:3F:20:CF:6A:5F:2F:8E:54:C5:A9:EE:AC:4A:10
Authority key identifier: FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA
Certificate issuer:       /CN=F3636ECFAF/serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
Certificate serial:       035E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
Manifest number:          0357
Signing time:             Tue 12 May 2026 03:59:55 +0000
Manifest this update:     Tue 12 May 2026 03:59:55 +0000
Manifest next update:     Thu 14 May 2026 03:59:55 +0000
Files and hashes:         1: _ESm2CkBQzmKHfvvhvwdrjRBoro.crl (hash: lFCXrjRncHGdASWgnMHgU4ojfR82cSRgCfqEHx/kbRM=)
                          2: 40F7518CF7B911F0A2EAB0A6DAE4EC9C.roa (hash: tFc77WdhIIRlE4uKB0sKEuV6jT/dhoYmgbo569TiCUw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 14 May 2026 03:59:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 862 (0x35e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636ECFAF, serialNumber=FC44A6D8290143398A1DFBEF86FC1DAE3441A2BA
        Validity
            Not Before: May 12 03:59:55 2026 GMT
            Not After : May 14 03:59:55 2026 GMT
        Subject: CN=6a02a5bb-07ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ac:a7:4d:fc:fe:2f:cb:11:26:f1:c7:b0:d6:
                    4c:e0:dc:01:8f:00:e7:6f:15:90:1c:e8:9f:67:b3:
                    34:7f:bf:db:e9:7f:ce:36:7c:cf:ff:b8:55:8b:bc:
                    25:96:af:e5:6f:60:0d:3b:87:77:48:b0:d0:4e:67:
                    0f:96:86:a5:2e:c4:0b:ee:64:0f:db:0c:d5:ed:65:
                    23:1e:1f:fa:c0:0b:49:45:07:96:0c:10:e0:29:c6:
                    df:75:24:fc:a1:fa:ec:99:81:61:7e:38:6c:da:40:
                    44:8a:f1:7e:78:a1:66:20:20:7d:dd:f1:96:07:91:
                    db:49:be:b6:fc:2a:5a:dd:aa:8f:36:37:fc:98:13:
                    6b:65:db:f4:a4:22:82:e6:c1:8c:fc:4d:a4:d2:f5:
                    03:44:3d:27:0b:01:82:12:3e:0d:1d:72:8c:be:6b:
                    c2:70:a4:3e:87:40:67:87:48:b7:f5:61:d0:7d:dc:
                    62:ad:f2:b3:e9:e7:b8:70:a7:41:c7:18:af:1a:8e:
                    8a:81:34:ce:68:31:5f:75:d8:de:70:98:83:3c:50:
                    ce:28:c3:23:3d:6b:f4:4f:9c:b9:53:6b:bf:a6:25:
                    19:f3:12:16:20:30:35:4c:89:18:d5:10:55:99:df:
                    de:bc:69:db:42:bc:7b:60:1e:cc:e9:7f:7b:c0:71:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:13:58:3D:36:69:3F:20:CF:6A:5F:2F:8E:54:C5:A9:EE:AC:4A:10
            X509v3 Authority Key Identifier:
                keyid:FC:44:A6:D8:29:01:43:39:8A:1D:FB:EF:86:FC:1D:AE:34:41:A2:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_ESm2CkBQzmKHfvvhvwdrjRBoro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636ECF/0384D03EC65D11EE9108E083775412E6/_ESm2CkBQzmKHfvvhvwdrjRBoro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:07:df:cf:9f:4f:49:71:d9:f3:ed:4a:be:23:aa:8a:2a:03:
         f7:9c:8b:07:50:d1:44:01:a1:df:3a:19:e3:60:55:37:00:68:
         72:d9:11:55:0c:2f:a9:b0:18:49:4f:d3:d7:17:f5:0e:4a:5b:
         1b:32:af:c4:6b:46:d4:be:c7:a1:9a:a2:59:e2:6f:e0:c9:15:
         bb:d3:91:50:78:42:dc:a1:0b:b1:ae:2c:74:00:25:ee:64:b7:
         29:29:0c:e4:3b:ee:3e:ed:81:12:7b:37:e3:31:8e:d0:21:96:
         8e:63:f6:51:ca:2c:59:e0:39:03:f2:48:4b:8a:90:4c:5e:c4:
         ed:3e:15:35:5c:22:03:87:34:ac:67:84:7d:1b:ae:fc:75:e8:
         8a:39:5d:3f:fc:5c:98:e4:37:27:28:bb:3b:09:52:eb:55:dd:
         01:f1:e3:14:d5:50:99:a7:47:5e:63:bc:f6:ee:90:d7:d3:88:
         19:de:c1:40:66:3d:cd:5b:1d:8e:70:d8:0b:fd:55:9f:50:35:
         2c:de:33:f7:dc:a7:b9:bb:6f:1b:5d:3c:1f:2b:d9:2b:2b:51:
         d3:fc:1d:15:90:48:dc:d6:ed:16:7c:82:86:14:9d:1f:3c:89:
         ea:4c:52:e2:e5:f2:9d:f9:cd:cb:b6:2e:21:4d:ba:d1:0e:36:
         bf:bc:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:03 2026 by rpki-client